Skip to main content

vantage6 CVE-2026-73652

| EUVDEUVD-2026-58195 HIGH
Incorrect Authorization (CWE-863)
2026-08-13 GitHub_M GHSA-47w6-gwp4-w6vc
Authentication Bypass Vantage6
7.1
CVSS 4.0 · Vendor: GitHub_M
Share

Severity by source

Vendor (GitHub_M) PRIMARY
7.1 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
6.5 MEDIUM

Network-accessible API exploitable by any low-privilege developer account; integrity is high due to trusted image substitution, with no confidentiality or availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

3
Source Code Evidence Fetched
Aug 13, 2026 - 19:01 vuln.today
Analysis Generated
Aug 13, 2026 - 19:01 vuln.today
CVE Published
Aug 13, 2026 - 18:15 cve.org
HIGH 7.1

Blast Radius

ecosystem impact
† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth
  • 3 pypi packages depend on vantage6 (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 5.0.2.

DescriptionCVE.org

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can change metadata including the algorithm image or image tag, causing reviewers and nodes to trust a different image from the one originally submitted for approval. No fixed version is available as of this review.

AnalysisAI

Broken authorization in vantage6's algorithm store allows any authenticated algorithm developer to overwrite a peer's pending algorithm metadata - including the Docker image reference or tag - before that submission is approved by reviewers. Versions 5.0.2 and earlier of this pip-installable federated analytics platform are affected, with no patch available. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Obtain low-privilege developer account on vantage6 instance
Delivery
Identify peer's algorithm pending review
Exploit
Send crafted API edit request to algorithm store
Execution
Overwrite image or image tag with attacker-controlled reference
Persist
Reviewers approve the altered record
Impact
Nodes pull and execute attacker-controlled container image
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires a valid authenticated account with developer-level privileges on the target vantage6 instance - the CVSS PR:L confirms low-privilege authentication is a prerequisite, ruling out unauthenticated access. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) confirms this is network-reachable by any low-privilege authenticated user with no special attack requirements, yielding a score of 7.1 with high integrity impact and no confidentiality or availability component. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An authenticated vantage6 algorithm developer with a standard low-privilege account sends a crafted API edit request targeting a colleague's algorithm record that is currently pending review. The attacker substitutes the image tag with one pointing to a malicious container image they control. …
Remediation No vendor-released patch has been identified at time of analysis; the GitHub advisory GHSA-47w6-gwp4-w6vc explicitly confirms no patch and no official workaround are available. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, inventory all vantage6 deployments and identify instances running version 5.0.2 or earlier; notify operators of exposure. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Vantage6

View all
CVE-2023-23930 HIGH POC
7.2 Oct 11

vantage6 is privacy preserving federated learning infrastructure. Rated high severity (CVSS 7.2), this vulnerability is

CVE-2025-43863 CRITICAL
9.8 Jun 12

Critical authentication bypass vulnerability in vantage6 (an open-source federated learning and privacy-enhancing techno
CVE-2024-21653 CRITICAL
9.8 Jan 30

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Mul
CVE-2024-21649 HIGH
8.8 Jan 30

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Mul
CVE-2023-47631 HIGH
8.8 Nov 14

vantage6 is a framework to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party
CVE-2023-23929 HIGH
8.8 Mar 04

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Rated high severity (CVS
CVE-2025-43866 HIGH
7.5 Jun 12

vantage6 servers auto-generate JWT secret keys using UUID1, a predictable algorithm that lacks cryptographic strength, a
CVE-2026-54445 MEDIUM
6.9 Jun 17

Default hardcoded admin credentials in vantage6 expose servers running versions prior to 5.0.0 to unauthorized administr
CVE-2026-54533 MEDIUM
6.9 Jun 17

Improper access control in vantage6 nodes prior to version 5.0.0 allows malicious algorithm containers to read input and
CVE-2024-23823 MEDIUM
6.5 Mar 14

vantage6 is an open source framework built to enable, manage and deploy privacy enhancing technologies like Federated Le
CVE-2023-22738 MEDIUM
6.5 Mar 01

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Rated medium severity (C
CVE-2023-28635 MEDIUM
5.4 Oct 11

vantage6 is privacy preserving federated learning infrastructure. Rated medium severity (CVSS 5.4), this vulnerability i

Same weakness CWE-863 – Incorrect Authorization

View all
CVE-2025-54253 CRITICAL POC
10.0
CVE-2025-24200 MEDIUM
6.1
CVE-2023-21715 HIGH
7.3
CVE-2025-21480 HIGH
8.6
CVE-2025-21479 HIGH
8.6
CVE-2025-32462 HIGH POC
8.8
CVE-2017-4915 HIGH POC
7.8
CVE-2024-6782 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-73652 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy